Symantec Identity Manager / Suite - CVE-2022-22965 (Spring Framework Vulnerability)

Products

• CA Identity Suite
• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

There was a recent vulnerability notification regarding CVE-2022-22965 (Spring Framework Vulnerability) which revolves around Java 9.x. Are any of the Identity Suite components vulnerable? 

Environment

Identity Manager 14.x

Resolution

All Identity Suite components have been reviewed by engineering and development and it has been determined that all components are not vulnerable. This includes the standalone and VAPP versions.

Please reference the below advisory board for all Symantec security products.

Symantec Security Advisory for Spring Framework CVE-2022-22965